CVE-2026-67269CWE-269privilege-escalation

CVE-2026-67269

Critical · published October 6, 2026

CVSS v3.1
9.9
EPSS
1%
Percentile
44.2
In the wild
Unconfirmed
What it is

Dell Container Storage Modules (CSM) Operator, versions prior to 1.18.0 contains an Improper Privilege Management vulnerability in the ContainerStorageModule Custom Resource reconciler. A low privileged remote attacker could potentially exploit this vulnerability, leading to escalation of privileges and gaining root-level access on cluster nodes.

The record
Technical detail
CVSS v3.1
9.9 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00534 · 44.2th percentile
Weakness
CWE-269 · Improper Privilege Management
Published
2026-10-06T19:17Z
Affected products (1)
ProductVersionsFixed in
dell/container_storage_modules< 1.18.01.18.0
References (1)
https://www.dell.com/support/kbdoc/en-us/000515771/dsa-2026-448-security-update-for-dell-container-storage-modules-multiple-vulnerabilities?msockid=3021cac2195069ed3194ddad186a68f9 · [email protected]
EPSS history
Timeline
  • 08 OCT 03:32Z
    EPSS moved — → 1%
    epss
  • 06 OCT 14:47Z
    Dell Container Storage Modules (CSM) Operator, versions prior to 1.18.0 contains an Improper Privilege Management vulnerability in the ContainerStorageModule…
    cvelistv5